Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/208f92dc-efa3-3212-b776-051af7d22028.roa
File:                     208f92dc-efa3-3212-b776-051af7d22028.roa (raw, json)
Hash identifier:          9L/oPRK42RbCbOIKcrIrxfSlv6r6Dp+Rz401lpG9fto=
Subject key identifier:   EC:CA:17:0C:E5:28:A9:27:F0:D0:B0:00:BB:E9:36:F3:9C:0F:77:AB
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20AFFF3405C8F23C420B280
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/208f92dc-efa3-3212-b776-051af7d22028.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        24.151.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:ff:f3:40:5c:8f:23:c4:20:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=430ec56b-33f3-4f55-af77-815364c6bd7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ad:01:00:69:02:e0:36:13:80:b3:1f:fe:b3:
                    ee:4b:06:93:09:43:d8:4e:30:eb:2d:02:fc:6b:d5:
                    72:e1:ed:bc:29:ca:73:0b:9d:de:27:68:51:7e:aa:
                    5f:cf:de:06:1a:be:5f:b7:68:ad:45:1a:ac:55:44:
                    1d:df:35:28:aa:f4:67:6f:30:9a:04:15:fa:25:fe:
                    79:61:aa:3f:43:5d:47:15:6c:bc:ba:6e:b8:23:65:
                    44:b8:5d:74:2c:7e:ef:be:14:91:15:7d:83:87:40:
                    3a:cc:a0:fb:55:6f:61:3a:2d:65:a5:a4:f4:d4:ae:
                    c4:e0:70:f7:0f:83:f8:a2:33:e6:09:8a:8e:3a:7f:
                    2f:11:17:ac:84:3d:71:14:e8:03:c0:33:33:af:26:
                    13:ce:4c:61:ad:ba:ac:dc:52:f3:6b:e9:7a:aa:94:
                    56:ea:89:15:04:d3:b7:b2:a9:d2:15:fa:93:12:29:
                    c3:60:8f:25:5d:3f:bd:e5:f3:a8:94:59:b4:5b:fc:
                    6e:a9:ca:97:54:1e:c5:d1:1c:9b:0d:1a:5d:27:35:
                    45:22:bb:dd:a2:63:15:00:7a:37:4a:8e:c3:6e:c0:
                    2c:4d:da:36:8f:6a:b6:fb:45:ff:ea:02:df:0c:26:
                    e9:41:e1:ce:6d:18:4b:f5:41:9f:da:4b:7a:85:bf:
                    c9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:CA:17:0C:E5:28:A9:27:F0:D0:B0:00:BB:E9:36:F3:9C:0F:77:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/208f92dc-efa3-3212-b776-051af7d22028.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.151.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:aa:cb:7a:3e:5e:df:88:09:79:a2:ee:db:26:e3:50:7f:57:
         77:0b:81:de:97:ab:45:ec:da:81:25:2c:8b:6e:ca:52:8f:3f:
         8c:1c:9e:df:65:6d:96:d5:92:31:1a:c8:23:41:b2:6d:4e:6a:
         94:02:09:cc:6c:cf:fa:b7:32:ae:a0:2c:d6:73:8a:10:91:51:
         b2:be:5a:e0:ba:0f:9b:12:c3:a6:57:34:a3:f9:14:9c:40:c0:
         b4:8c:de:31:4d:5c:5e:42:39:0e:8c:d8:ef:22:76:58:cc:04:
         e4:7e:cb:97:f9:17:aa:b2:1e:99:8b:71:e8:07:23:c7:4d:a4:
         e3:f2:30:24:c2:db:6f:74:91:b8:41:e1:66:6b:31:51:f0:df:
         47:81:b2:ac:f4:85:22:15:af:03:47:10:1a:73:fe:d8:7d:ee:
         52:c7:fb:d7:6c:e3:e8:5b:94:96:06:b5:a8:1c:ef:fe:c1:13:
         43:61:9c:42:91:a5:6a:48:c0:bf:21:71:42:05:b5:55:26:e3:
         87:60:ae:97:37:73:99:5d:29:ce:7a:9c:c0:34:a9:1c:81:3c:
         2e:be:a5:dc:e0:f1:eb:f4:3e:6a:79:67:90:10:96:46:54:39:
         6c:b2:39:9d:ce:bf:10:24:62:ee:c6:78:64:7a:4e:8e:7d:06:
         99:34:e9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:50:08 2025 by rpki-client